Qualifications & people skills
Your information and your choices
Privacy Policy
How Bradfield collects and uses personal information, the choices available to you and how to contact us about your privacy.
In this policy
Draft for internal review — prepared 18 September 2026. Not yet published.
Publication note: Complete all [CONFIRM] items and validate the processing described below before publication. These are editorial instructions, not website copy. Proposed lawful bases must match Bradfield’s actual practices and documented assessments. Set the effective date when the final notice is approved.
Last updated: [CONFIRM: publication date]
1. Who we are
Bradfield Learning and Development Ltd (company number 03835955) is responsible for the personal information covered by this notice. Our registered office is Unit 2, 6–7 St. Mary at Hill, London, England, EC3R 8EE. In this notice, “Bradfield”, “we”, “us” and “our” refer to that company.
[CONFIRM: this company is the controller for all activities described. Identify any other Bradfield or LEORON entity acting as a separate or joint controller, its contact details and the relevant activities.]
For questions about this notice or to exercise your data protection rights, email enquiries@bradfield.co.uk, with “Privacy request” in the subject line, or write to our registered office.
[CONFIRM: the mailbox and postal address are monitored for privacy requests; add DPO contact details if applicable.]
2. What this notice covers
This notice explains how Bradfield handles personal information when you visit bradfield.co.uk, ask about a CIPD qualification or another course, arrange training for your organisation, enrol as a learner or communicate with our team. It covers prospective learners, learners and people who contact us on behalf of an employer. It explains what information we use, why we use it, who may receive it and how you can manage your privacy choices.
[CONFIRM: whether learner administration is covered here or by a separate learner notice. List any other covered websites; do not retain former domains without checking them.]
3. Information we collect
Information you provide
Depending on your interaction with us, we may collect:
- Contact and enquiry information, such as your name, email address, telephone number, country, job title, employer, preferred study language, course interests and messages.
- Booking and learning information, such as registration details, relevant qualifications or experience, attendance, assessment records and communications about your studies.
- Billing information, such as billing contact details, invoices and payment status.
- Marketing preferences and records of your consent, objections or unsubscribe requests.
- Technical information, such as IP address, browser and device information, pages visited and cookie preferences, depending on the technologies used.
How we receive information
You may give us information through an enquiry form, email, telephone conversation, course booking or learning activity. If your employer arranges your training, it may provide the contact and booking details needed to organise your place. Where an awarding organisation or delivery partner provides learner information, we use it only for the relevant, lawful training administration purpose.
Website and communication activity
Information generated when you browse our website is distinct from information you enter into a form. The collection of technical information depends on the services operating on the page and, where required, your consent or other available choices. Visiting the website does not by itself mean that you have agreed to marketing.
[CONFIRM: identify any analytics, advertising pixels, email open or click tracking, surveys, webinar platforms and learner account services actually used. Explain their purposes and controls. Do not describe unused LEORON services as Bradfield services.]
[CONFIRM: actual data categories, payment handling, source organisations and any call or class recordings. Remove categories not collected. If health, disability or accessibility information is collected, describe it, its purpose and the applicable Article 9 condition as well as the Article 6 lawful basis.]
4. Why we use your information
Our training-related purposes include helping you choose a suitable course, handling your booking, communicating practical course information and administering the learning services you receive. For organisational training enquiries, we use relevant business contact information to discuss requirements and prepare a proposal.
We must have an appropriate lawful basis for using personal information. The following table sets out the proposed purposes and bases for this notice.
| Purpose | Proposed lawful basis — verify before publication |
|---|---|
| Responding to enquiries and discussing a course you wish to book personally | Taking steps at your request before entering a contract, where applicable; otherwise legitimate interests in responding to relevant enquiries. |
| Managing an individual’s booking and providing contracted learning services | Performance of our contract with that individual. |
| Arranging employer-funded training and administering business contacts | Legitimate interests in delivering and administering training commissioned by employers, where appropriate. |
| Keeping records required by tax, accounting or other applicable law | Compliance with a legal obligation; identify the actual obligation internally. |
| Handling complaints and protecting or establishing legal rights | Legitimate interests in resolving disputes and protecting our business and customers, where appropriate. |
| Sending marketing communications | Consent where required; otherwise an appropriate lawful basis, subject to applicable electronic marketing rules. |
| Protecting and improving our website | Legitimate interests in operating a secure and effective website where appropriate; consent where required for tracking technologies. |
[CONFIRM: adopt only the bases actually relied upon. Complete legitimate interests assessments where needed and describe the relevant interests. Do not use this table as blanket permission for processing.]
Where information is needed to arrange or deliver a service, we will explain this when collecting it. Without necessary information, we may be unable to process your booking or provide the requested service. Optional marketing preferences do not determine whether you can enquire about a course.
5. Marketing and your choices
Responding to an enquiry or sending necessary course administration messages is separate from sending promotional communications.
Where consent is required for email or text marketing, we will ask for it separately. If we rely on the commercial soft opt-in, this will be limited to circumstances where its conditions are met, including offering an opt-out when collecting your details and in each subsequent marketing message. Different rules may apply to corporate subscribers.
You can unsubscribe using the link in a marketing email or contact enquiries@bradfield.co.uk. You have the right to object at any time to the use of your personal information for direct marketing, including related profiling.
We may retain a limited suppression record to help ensure we respect your preference not to receive marketing.
Withdrawing marketing consent or unsubscribing does not prevent us from sending messages needed to manage an existing booking, explain a course change or respond to a request you have made. Tell us if your contact details change so that essential course communications reach you.
[CONFIRM: marketing channels, lawful bases, opt-in wording, unsubscribe process and suppression arrangements. Align all website and Monday.com forms with the final policy.]
6. Who receives your information
We explain sharing by its purpose and the role of the recipient. A supplier handling information on our instructions is different from an organisation using information for its own responsibilities.
Where necessary for the purposes explained above, recipients may include providers of website hosting, enquiry management, learning platforms, communications, payment services and professional advice. Course delivery may also involve tutors, assessors, awarding organisations and employers sponsoring training.
Enquiry forms and course administration
[CONFIRM: where Bradfield uses Monday.com enquiry forms, describe the form fields collected, enquiry follow-up purpose, Bradfield controller and Monday.com supplier role. Confirm the applicable hosting, subprocessors, retention and transfer arrangements before publishing this description.]
Qualifications and employer-sponsored learning
[CONFIRM: for CIPD or other awarding organisations, specify the registration, assessment or certification information actually shared. For employer-funded learning, specify whether attendance, progress, assessment results or completion information is reported, to whom and for what purpose. Do not imply that a sponsoring employer receives all learner communications.]
[CONFIRM: actual recipients, purposes and roles. Explain precisely what sponsoring employers receive. Confirm whether Monday.com processes enquiries and describe that use. Confirm any sharing with CIPD and any Bradfield or LEORON group entities; group ownership alone is not an explanation for sharing.]
We may also disclose information where required by law or where necessary and lawful to establish, exercise or defend legal claims.
7. International transfers
Providing training to people in different countries can involve access to information across borders. The safeguards required depend on the organisations involved and the applicable data protection rules. A supplier’s website address or a booking location does not establish where personal information is stored or accessed.
[CONFIRM BEFORE PUBLICATION: whether information is accessed or processed outside the UK, including by overseas staff, group entities, service providers or their subprocessors. Describe the relevant destinations or arrangements, applicable adequacy regulations or other safeguards, and how people can obtain details or copies. Do not infer data residency from a form URL or assume that UK hosting prevents overseas access.]
8. How long we keep information
We retain personal information only for as long as necessary for its purposes, taking account of applicable legal requirements and the need to handle complaints or legal claims.
[CONFIRM: insert actual periods or meaningful retention criteria for enquiries, learner and assessment records, invoices, marketing records, suppression records and technical logs. Explain the starting point for each period. Ensure deletion, anonymisation and backup arrangements support the published statements.]
9. Cookies and similar technologies
See our Cookies Policy for information about website cookies. This privacy notice also applies where cookies or similar technologies involve personal information.
Cookies and similar technologies can store or access information on your device. They may support website functionality, preferences, statistical analysis or advertising, depending on their purpose and configuration.
Where consent is required, we will obtain it before using the relevant technology. Where a statutory exception applies, we will meet its conditions, including providing information and an easy way to object where required. Advertising tracking does not qualify for the statistical-purpose exception.
[CONFIRM: check that the linked cookie policy is current and add a working preferences control. Publish an accurate inventory of providers, purposes and lifetimes. Test acceptance, rejection and withdrawal. Remove this proposed description if it does not match the implemented controls.]
10. Protecting information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. No website or electronic transmission can be guaranteed completely secure.
[CONFIRM: this statement is supported by actual controls, staff practices and supplier arrangements. Do not add claims of certification, encryption standards or guaranteed security without evidence.]
11. Your rights
Depending on the circumstances and the lawful basis for processing, you may have the right to:
- Access your personal information and obtain a copy.
- Correct inaccurate or incomplete information.
- Request deletion or restriction of processing.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on it, without affecting the lawfulness of earlier processing.
Some rights are subject to legal conditions and exceptions. To make a request, use the contact details in section 1. We may need information to verify your identity before responding.
You do not need to use a particular form to make a rights request. Please tell us what you would like us to do and provide enough information for us to locate the relevant records. We will explain any applicable limits on your request and respond within the time required by law.
[CONFIRM: whether any automated decision-making with legal or similarly significant effects occurs. If it does, add the applicable explanation and safeguards; do not claim that it does not occur without checking.]
12. Complaints
If you have concerns about our use of personal information, please contact us using the details in section 1 so we can investigate.
You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for details. You do not have to obtain our permission to complain to the ICO.
[CONFIRM: add the operational privacy complaints process, including applicable acknowledgement and response arrangements.]
13. Other websites
This notice describes Bradfield’s processing. It does not automatically cover another organisation simply because we link to its website, offer its qualification or work with it. Any separate notice should identify the organisation responsible and explain its own use of information.
Independent websites linked from our website have their own privacy notices. Read those notices before providing information. Our use of embedded forms and service providers is addressed in this notice and is not excluded merely because another organisation supplies the technology.
14. Changes to this notice
We will update this notice when our practices or applicable requirements change. The date at the top will show when it was last updated. Where required, we will bring material changes to your attention directly.
A change to this notice does not replace any consent that the law requires us to obtain for a new use of your information.